Privacy Policy
Effective date: 2 May 2026
This Privacy Policy explains how Bake Tasty (trading in the United Kingdom) collects, uses, stores, and shares personal data when you visit https://www.baketasty.co.uk/, place orders, contact us, or otherwise interact with our services. It applies to all visitors, customers, and users in the UK.
Who We Are
Data controller: Bake Tasty (trading in the United Kingdom). Contact email: sales@baketasty.co.uk. If you have questions about this policy or want to exercise your data rights, please contact us at the email above.
Personal Data We Collect
We collect personal data that you provide directly and technical data collected automatically:
Identity and contact data: name, email address, postal address, telephone number, delivery address.
Order and payment data: order details, billing address, payment transaction references; we do not store full payment card details on our servers where a third‑party payment processor is used.
Communications: messages, enquiries, customer service correspondence, and notes about your orders or preferences.
Technical and usage data: IP address, device and browser information, pages visited, referring pages, search terms, and analytics data collected via cookies and similar technologies.
Marketing and preference data: your marketing consents and communication preferences.
Optional data: dietary requirements, event dates, or other information you provide when placing bespoke orders.
We do not knowingly collect personal data from children under 13. If we become aware that we have collected such data without parental consent we will delete it.
How We Use Your Personal Data
We use personal data for the following purposes:
To provide and manage orders and deliveries.
To process payments and prevent fraud.
To communicate with you about orders, enquiries, account matters, and customer service.
To personalise and improve our website and services using aggregated analytics.
To send marketing communications where you have consented or where we have a legitimate interest and you have not opted out.
To comply with legal obligations such as tax, accounting, and regulatory requirements.
To respond to legal requests and protect our rights.
We will only use your personal data for purposes compatible with the original reason it was collected or where we have a lawful basis to do so.
Lawful Bases for Processing and Retention
Lawful bases we rely on include:
Contract — processing necessary to perform our contract with you (for example, to fulfil orders).
Consent — where you have given clear consent (for example, marketing emails and non‑essential cookies).
Legitimate interests — for business operations, fraud prevention, and improving services, balanced against your rights.
Legal obligation — where required by law (for example, tax and accounting).
Retention: We retain personal data only as long as necessary for the purpose collected, to comply with legal obligations, resolve disputes, and enforce agreements. Typical retention periods: order records and transactional data — up to 6 years for tax and accounting purposes; marketing consents — until withdrawn; support correspondence — for the period necessary to resolve the matter. We securely delete or anonymise data when no longer required.
Cookies and Similar Technologies
We use cookies and similar technologies to make the site work, to measure and improve performance, and to support marketing. Cookies fall into categories such as: essential, performance/analytics, and marketing.
Control: You can manage cookie preferences via the cookie banner on our site and through your browser settings. Disabling non‑essential cookies may affect site functionality.
Third parties: We use third‑party analytics and advertising providers who may set cookies when you visit our site.
Sharing and Third‑Party Processors
We may share personal data with:
Service providers and processors who perform services on our behalf (payment processors, delivery partners, hosting providers, email and marketing platforms, analytics providers).
Professional advisers such as accountants and legal advisers when necessary.
Law enforcement, regulators, or other authorities where required by law or to protect rights and safety.
We require third parties to implement appropriate security measures and to process data only on our instructions.
International Transfers
Where personal data is transferred outside the UK or the European Economic Area, we will ensure appropriate safeguards are in place such as UK‑approved standard contractual clauses, adequacy decisions, or other lawful transfer mechanisms to protect your data.
Security
We implement reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration. No system is completely secure; we cannot guarantee absolute security but we regularly review and update our safeguards.
Automated Decision Making and Profiling
We do not carry out automated decision making that has a legal or similarly significant effect on you. We may use automated tools to support marketing segmentation or personalise content; where such processing is based on profiling and has a significant effect, we will provide information and rights as required by law.
Your Rights
Under UK data protection law you may have the right to:
Access the personal data we hold about you.
Rectify inaccurate or incomplete data.
Erase your personal data in certain circumstances.
Restrict or object to processing.
Data portability for data you have provided to us in a structured, commonly used format.
Withdraw consent where processing is based on consent.
To exercise your rights, contact us at sales@baketasty.co.uk. We will respond within the timeframes required by law. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you are unhappy with our response.
Children
Our services are not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe we have collected such data, contact us to request deletion.
Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make material changes we will update the Effective date and, where appropriate, notify you by email or via the website.
Contact and Complaints
Contact email: sales@baketasty.co.uk. If you remain dissatisfied after contacting us, you may lodge a complaint with the UK Information Commissioner’s Office.
Important note: This Privacy Policy is provided for informational purposes and does not constitute legal advice. For a version tailored to your specific operations and to ensure full legal compliance, consult a qualified solicitor or data protection professional.